pppscn CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH pppscn CVE published 2026-10-14

CVE-2026-110618

SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server, allowing unauthenticated network attackers to invoke remote-control APIs. This could lead to unauthorized access and disruption of functionality. Administrators and security teams should assess exposure, verify authentication mechanisms, and remediate vulnerable instances. The vulnerability affects Sms [truncated]